Skip to content
Ransomware

AB Mauri Private listed on thegentlemen ransomware leak site

The threat group known as thegentlemen claims to have listed data belonging to AB Mauri Private on their leak site.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: thegentlemen
  • Country: India
  • Sector: Manufacturing
  • Announcement date: September 9, 2025

Thegentlemen claims to have stolen data from AB Mauri Private

The threat group known as thegentlemen has announced that it has listed data belonging to AB Mauri Private on its dedicated leak site. This announcement, which surfaced on September 9, 2025, suggests a targeted operation against the organization. It is important to note that while the group has made these claims, the allegations regarding the breach have not been verified by any independent sources.

Ransomware groups often utilize leak sites to exert pressure on their victims through a tactic known as double extortion. In such scenarios, attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive information. They then threaten to publish this data on public platforms if a ransom is not paid. This method aims to maximize leverage by threatening the victim's reputation and legal standing.

Details of the claimed attack

According to the announcement made by thegentlemen, the cyberattack against AB Mauri Private is stated to have occurred on July 5, 2025. This indicates that the threat actors may have had access to the network for several months prior to the public announcement on their leak site.

The group has not provided any details regarding the nature or the specific content of the allegedly leaked data. Furthermore, there is no information available regarding the total size of the data, the number of files involved, or any specific ransom demands made by the attackers. Attempts to access the group's leak site to verify the claims resulted in a technical error message, as shown in the provided screenshot.

About AB Mauri Private

AB Mauri India Private Ltd is a subsidiary of Associated British Foods. The company specializes in the production and distribution of yeast and bakery ingredients. Operating within the manufacturing sector, the company is based in Kerala, India.

Potential risks and industry implications

This incident may pose potential risks to the company's operational continuity and commercial reputation. Depending on the nature of the leaked data, the exposure of employee or customer information could lead to identity theft and targeted phishing attacks. Such attacks often follow a data breach, as stolen credentials or personal details are used to deceive individuals or gain further access to corporate networks.

As the company is based in India, potential data breaches may trigger legal processes under local data protection regulations. Organizations operating in the manufacturing and food production sectors often face complex supply chains, making them targets for attackers looking to disrupt production or steal proprietary formulations.

Information regarding the thegentlemen group remains limited. To mitigate secondary risks, it may be advisable for companies facing such threats to conduct a coordinated security audit with their supply chain partners and parent companies. Strengthening defensive postures through regular security assessments, implementing multi-factor authentication, and maintaining robust backup protocols are common industry practices used to defend against ransomware-related threats.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Related stories